Installing the how to fix hacked wordpress site Scan plugin will check all this for you, and alert you to anything that you may have missed. Additionally, it will tell you that a user named"admin" exists. That is your administrative user name. If you wish you can follow a link and find directions for changing that title. Personally, I think that a strong password is good enough security, and because I followed those steps, there have been no successful attacks on the numerous blogs that I run.
No software system find out is immune to bugs and vulnerabilities. Security holes will be found and bad guys will do their best to exploit them. Keeping your software up-to-date is a good way to stave off attacks, once security holes are found because their products will be fixed by software vendors.
You should also set the"Anyone Can Register" in Settings/General to off, and you Find Out More should have some sort of spam plugin. Akismet is the old standby, the one I use, but there are lots of them these days.
Now it's time to sign up for a Facebook accounts that is new and use this person's name and identity. Once I get it all set up, I'll be telling you posing as your friend and asking you to be friends with me on Facebook (or Twitter, or whichever societal site).
Do your homework this page and some searching, but if you are pressed for time and want to get this try out the WordPress security plugin that I use. It is a relief to know that my website (and business!) are secure.